a256886572008在HIPS区发的测试HIPS能力的磁碟機病毒 过红伞

yuyando

原帖地址：http://bbs.kafan.cn/viewthread.php?tid=184178&;page=1&extra=#pid2473316

原帖由 a256886572008 于 2008-1-7 20:57 发表
附件的 病毒 會 經由 發送消息，關閉 某某進程！

測試方法：

1.運行病毒(遇到高危 AD 或 RD 當然按阻止，只要 讓病毒有進程即可！)

2.打開 icesword (不一定是 icesword，只要是病毒會關的，都可以拿來作測 ...

tarting the file scan:

Begin scan in 'F:\Documents and Settings\Administrator\桌面\pagefilex.rar'


End of the scan: 2008年1月7日  22:20
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

[ 本帖最后由 yuyando 于 2008-1-7 23:11 编辑 ]

The EQs

C:\Documents and Settings\Don johnson\桌面\pagefilex.rar » RAR » pagefilex.exe - a variant of Win32/Xorer virus

无尽藏海

蜘蛛           Trojan.Rox

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
红伞果然没报，蜘蛛报了

1688388728

D:\1\pagefilex\pagefilex.exe\data001 - infected with Trojan.Rox

Archive contains an infected item

yuyando

磁碟機病毒，微点拦截了吗

gho

C:\Documents and Settings\gho\桌面\pagefilex.exe - Win32/Xorer 病毒的变种

wangjay1980

昨天发过的东西，转来转去

奇怪，卡巴还没入库

风野胤

因为更新了

[ 本帖最后由 yuyando 于 2008-1-7 23:11 编辑 ]

saga3721

原帖由 yuyando 于 2008-1-7 23:08 发表
磁碟機病毒，微点拦截了吗

没有，专删微点服务